Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
File:                     E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft (raw, json)
Hash identifier:          h0191RPbCAaEs/agQhKrRSkTHOCC0VoK0gMm6zcbsXg=
Subject key identifier:   8C:A2:13:6C:B8:2F:78:22:58:33:6A:A7:74:AC:18:7F:77:58:7C:6F
Authority key identifier: E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA
Certificate issuer:       /CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
Certificate serial:       1A58FD0B1A329093A539A0819E0394208B545E19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
Manifest number:          3E
Signing time:             Fri 31 Jan 2025 15:31:58 +0000
Manifest this update:     Fri 31 Jan 2025 15:26:58 +0000
Manifest next update:     Sat 01 Feb 2025 15:52:58 +0000
Files and hashes:         1: 323830343a346134633a3a2f33322d3438203d3e20323637323331.roa (hash: GkEzsyZi6tuevIn3gMx1prvm416Wn5cYcUTYm8AnQ/g=)
                          2: E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl (hash: ZJzt6M9QXXepOIy9JvtQtE6ppAO6k59WToH0Nx6ep7s=)
                          3: 34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa (hash: a2yYohXaU93XJQ9xBTYokjZSjZfEdQ2T5zC9y7vuYe4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:fd:0b:1a:32:90:93:a5:39:a0:81:9e:03:94:20:8b:54:5e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
        Validity
            Not Before: Jan 31 15:26:58 2025 GMT
            Not After : Feb  1 15:52:58 2025 GMT
        Subject: CN=8CA2136CB82F782258336AA774AC187F77587C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d3:47:3e:b9:a0:a7:49:67:34:e8:28:59:a2:
                    bb:83:d9:0c:98:14:63:69:94:0f:cd:5c:f0:ed:a5:
                    c9:d8:89:c0:c1:c4:a1:34:db:6c:ee:af:0f:58:b1:
                    7f:cd:47:e8:49:af:b7:7c:e9:8e:c3:e3:cd:a9:5c:
                    74:fc:52:d1:c8:cf:22:35:71:89:7f:f5:2b:05:26:
                    ae:58:cb:83:72:16:90:43:a4:b2:2e:f8:a4:56:ff:
                    66:54:b3:21:41:1e:73:d9:aa:ad:d5:70:a7:4b:7f:
                    d3:76:68:64:6e:04:6a:52:56:37:56:46:15:6d:5c:
                    dd:c2:69:21:d8:c1:1b:63:6a:12:ca:ca:0f:6a:7e:
                    67:60:98:59:40:c3:e0:5f:5d:7b:5c:98:db:a3:e7:
                    2c:68:5a:0c:15:b5:ba:b7:dd:c9:25:23:c2:1c:4c:
                    19:02:6d:50:55:e9:81:03:94:25:86:5a:e0:86:ab:
                    c2:2a:7f:8e:62:7d:1f:3b:b0:da:3d:39:cb:bb:2c:
                    de:f9:42:a4:91:23:aa:e5:8f:25:56:b0:57:5e:22:
                    60:71:08:2c:6b:15:c1:13:fb:e5:6b:aa:6c:2f:d7:
                    3a:b1:a7:60:ad:44:84:ea:4d:ec:c5:bd:f4:88:51:
                    f6:fb:bc:6b:9b:5c:86:7f:dc:f2:2a:e4:b5:45:54:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:13:6C:B8:2F:78:22:58:33:6A:A7:74:AC:18:7F:77:58:7C:6F
            X509v3 Authority Key Identifier:
                keyid:E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:6f:9c:fc:12:d6:37:a5:0c:51:9b:00:a6:97:d6:ad:c6:
         5f:f0:29:0f:a8:f1:2f:c5:dd:11:b6:52:c2:08:73:84:13:b6:
         12:d4:ad:c2:47:26:59:31:f3:c5:87:ee:f8:ff:54:51:75:b9:
         8e:ed:a2:6a:7c:4c:df:d5:d5:3e:db:34:9d:50:ae:a3:e0:57:
         f4:19:bb:34:b3:ca:2b:38:77:a7:3d:43:ec:19:3a:ee:49:69:
         b8:a2:a1:a6:ab:4a:89:c8:44:54:60:3c:53:4c:8f:25:be:93:
         8f:7f:d3:87:f6:10:ab:db:f8:a8:aa:c9:0b:e0:da:50:76:b0:
         d5:9b:8c:30:b2:90:d2:76:2c:5e:5c:15:51:de:6d:77:8f:cb:
         e9:68:19:8b:22:58:83:b0:c4:a3:49:63:0d:c3:2d:2e:71:dc:
         77:9f:49:28:c4:8d:1e:18:54:ce:3f:ba:bb:28:73:f5:8c:e6:
         f5:84:b1:9a:83:4e:0b:d2:f4:70:e6:95:f4:02:51:e3:5c:f3:
         d4:c8:2b:46:45:23:3f:0f:96:4b:d9:cc:ce:1e:8f:60:8b:e2:
         79:0b:f9:13:28:76:7e:29:6c:4b:b4:2f:a1:71:1c:c4:95:9d:
         be:fe:48:79:8e:7a:0b:be:87:8e:5c:46:3e:f6:23:46:4f:c3:
         5b:1a:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:31 2025 by rpki-client